Benny Pedersen via mailop a écrit le 27/08/2026 à 21:39 : >> As Rainer suggests, a single DKIM key for all and a CNAME record for >> each domain is arguably the best solution. > CNAME breaks DNSSEC
No, that's fine, but DNSSEC must also be enabled on each external target (MX, CNAME). The target MX or CNAME domain must be signed to be compatible with all domains, whether signed or unsigned. xaf _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
